MarkSS

updated the signatures, but still hangs at VSearch. And somehow I got those annoying Mackeeper ads again.

Malwarebytes Anti-Malware 1.2.5.715 system report - November 7, 2016 at 1:02:26 PM CST Mac OS X version Version 10.12.2 (Build 16C32f) System uptime: 2d 04:23:27 Helper tool version: 1.2.5.715 Signatures version: 139 Safari extensions ----------------------- markshinn markshinn Name: 1Password.safariextz Path: /Users/markshinn/Library/Safari/Extensions/1Password.safariextz Modified: 2016-10-19 22:40:15 +0000 Name: Youppes Path: /Users/markshinn/Library/Safari/Extensions/Youppes.safariextz Modified: 2016-09-06 15:34:41 +0000 Chrome extensions ----------------------- Firefox extensions ----------------------- markshinn yjf4syeq.default Name: [not a valid Firefox extension] Path: /Users/markshinn/Library/Application Support/Firefox/Profiles/yjf4syeq.default/extensions/staged Modified: 2016-05-04 00:34:36 +0000 User Login Items ----------------------- User: markshinn Name: Steam Path: /Applications/Steam.app Name: WorkspaceUpdate Path: /Applications/Workspace/WorkspaceUpdate.app Name: AdobeResourceSynchronizer Path: (null) Name: Dropbox Path: /Applications/Dropbox.app Name: Wuala Path: (null) Name: Powwownow Path: (null) Name: AdobeResourceSynchronizer Path: (null) Name: AdobeResourceSynchronizer Path: /Applications/Adobe Acrobat DC/Adobe Acrobat.app/Contents/Helpers/AdobeResourceSynchronizer.app Name: Advanced Mac Cleaner Path: (null) Name: MacOptimizer Path: /Applications/MacOptimizer.app System startup items ----------------------- /Library/StartupItems/RetroRun User launch agents ----------------------- /Users/markshinn/Library/LaunchAgents/com.adobe.ARM.de23d1e3aa2d00ce38d73f10fcbdc8dcaaaf6be989610710a1ddda77.plist /Users/markshinn/Library/LaunchAgents/com.appicon.AppIcon.plist /Users/markshinn/Library/LaunchAgents/com.apple.SafariBookmarksSyncer.plist /Users/markshinn/Library/LaunchAgents/com.mopt.hmopt.plist /Users/markshinn/Library/LaunchAgents/com.onlineapplicationnotice.AppNotice.plist /Users/markshinn/Library/LaunchAgents/com.valvesoftware.steamclean.plist /Users/markshinn/Library/LaunchAgents/Smokyashan.update.plist /Users/markshinn/Library/LaunchAgents/ws.agile.1PasswordAgent.plist /Users/markshinn/Library/LaunchAgents/Youppes.AppVemoral.plist /Users/markshinn/Library/LaunchAgents/Youppes.btvlit.plist /Users/markshinn/Library/LaunchAgents/Youppes.dolnwoad.plist /Users/markshinn/Library/LaunchAgents/Youppes.uadpte.plist System launch agents ----------------------- /Library/LaunchAgents/com.adobe.AAM.Updater-1.0.plist /Library/LaunchAgents/com.adobe.AdobeCreativeCloud.plist /Library/LaunchAgents/com.adobe.ARMDCHelper.cc24aef4a1b90ed56a725c38014c95072f92651fb65e1bf9c8e43c37a23d420d.plist /Library/LaunchAgents/com.logmein.LMILaunchAgentFixer.plist /Library/LaunchAgents/com.logmein.logmeingui.plist /Library/LaunchAgents/com.logmein.logmeinguiagent.plist /Library/LaunchAgents/com.logmein.logmeinguiagentatlogin.plist /Library/LaunchAgents/com.oracle.java.Java-Updater.plist System launch daemons ----------------------- /Library/LaunchDaemons/com.adobe.adobeupdatedaemon.plist /Library/LaunchDaemons/com.adobe.agsservice.plist /Library/LaunchDaemons/com.adobe.ARMDC.Communicator.plist /Library/LaunchDaemons/com.adobe.ARMDC.SMJobBlessHelper.plist /Library/LaunchDaemons/com.adobe.fpsaud.plist /Library/LaunchDaemons/com.ambrosiasw.ambrosiaaudiosupporthelper.daemon.plist /Library/LaunchDaemons/com.logmein.logmeinserver.plist /Library/LaunchDaemons/com.logmein.raupdate.plist /Library/LaunchDaemons/com.malwarebytes.HelperTool.plist /Library/LaunchDaemons/com.microsoft.autoupdate.helpertool.plist /Library/LaunchDaemons/com.microsoft.office.licensing.helper.plist /Library/LaunchDaemons/com.microsoft.office.licensingV2.helper.plist /Library/LaunchDaemons/com.oracle.java.Helper-Tool.plist /Library/LaunchDaemons/com.starfield.backupservice.plist /Library/LaunchDaemons/com.wuala.WualaFS.KextLoaderHelper.plist /Library/LaunchDaemons/SecureClient.plist Kernel extensions ----------------------- /System/Library/Extensions/Belcarra.USBLAN_netpart.kext /System/Library/Extensions/Belcarra.USBLAN_netpart.kext/Contents/PlugIns/Belcarra.USBLAN_netpart.kext /System/Library/Extensions/Belcarra.USBLAN_usbpart.kext /System/Library/Extensions/Belcarra.USBLAN_usbpart.kext/Contents/PlugIns/Belcarra.USBLAN_usbpart.kext /System/Library/Extensions/BJUSBMP.kext /System/Library/Extensions/DexComUSB.kext /System/Library/Extensions/DexComUSB.kext/Contents/Plugins/DexComUSBCDCACMControl.kext /System/Library/Extensions/DexComUSB.kext/Contents/Plugins/DexComUSBCDCACMData.kext /System/Library/Extensions/FTDIUSBSerialDriver.kext /System/Library/Extensions/hp_fax_io.kext /System/Library/Extensions/hp_Inkjet3_io_enabler.kext /System/Library/Extensions/JMicronATA.kext /System/Library/Extensions/LogMeInSoundDriver.kext /System/Library/Extensions/ProlificUsbSerial.kext /System/Library/Extensions/RemoteControl.USBLAN_usbpart.kext /System/Library/Extensions/RemoteControl.USBLAN_usbpart.kext/Contents/PlugIns/RemoteControl.USBLAN_usbpart.kext /System/Library/Extensions/SiLabsUSBDriver64.kext /System/Library/Extensions/TIVCPSerial.kext /Library/Extensions/ACS6x.kext /Library/Extensions/AmbrosiaAudioSupport.kext /Library/Extensions/ArcMSR.kext /Library/Extensions/ATTOCelerityFC8.kext /Library/Extensions/ATTOExpressSASHBA2.kext /Library/Extensions/ATTOExpressSASRAID2.kext /Library/Extensions/CalDigitHDProDrv.kext /Library/Extensions/HighPointIOP.kext /Library/Extensions/HighPointRR.kext /Library/Extensions/hp_io_enabler_compound.kext /Library/Extensions/PromiseSTEX.kext /Library/Extensions/SoftRAID.kext launchd.conf contents ----------------------- Hosts file ----------------------- ## # Host Database # # localhost is used to configure the loopback interface # when the system is booting. Do not change this entry. ## 127.0.0.1 localhost 255.255.255.255 broadcasthost ::1 localhost fe80::1%lo0 localhost 127.0.0.1 DriveMap Scan log ----------------------- 2016-11-03 17:18:52 : 2016-11-03 17:18:53 : ----- Scan Started ----- 2016-11-03 17:18:53 : Scanning with signatures version 139 (2016-11-03) 2016-11-03 17:18:53 : Adware.Spigot : /Users/markshinn/Library/Application Support/AppCommon 2016-11-03 17:26:12 : 2016-11-03 17:26:12 : ----- Scan Started ----- 2016-11-03 17:26:12 : Scanning with signatures version 139 (2016-11-03) 2016-11-03 17:26:12 : Adware.Spigot : /Users/markshinn/Library/Application Support/AppCommon 2016-11-07 12:53:32 : 2016-11-07 12:53:32 : ----- Scan Started ----- 2016-11-07 12:53:32 : Scanning with signatures version 139 (2016-11-03) 2016-11-07 12:53:32 : Adware.Spigot : /Users/markshinn/Library/Application Support/AppCommon 2016-11-07 12:55:44 : 2016-11-07 12:55:45 : ----- Scan Started ----- 2016-11-07 12:55:45 : Scanning with signatures version 139 (2016-11-03) 2016-11-07 12:55:45 : Adware.Spigot : /Users/markshinn/Library/Application Support/AppCommon